Forum Discussion

JRodwell's avatar
JRodwell
Copper Contributor
Feb 14, 2025
Solved

Understanding Advanced hunting results

Is anyone able to breakdown the source SourceApp values in detail? In particular what is "ms-fluid_component"?

I have a Form that a user created but they're not sure how. I run it through Advanced hunter in Microsoft Defender & it returns "SourceApp":"ms-fluid_component".

What is this?

Thanks

  • Hi JRodwell,

    "ms-fluid_component" refers to a Microsoft component related to the fluid framework, which is used for building interactive, real-time collaborative applications. It might show up in the results when the form interacts with components that use this framework, like SharePoint or Teams. It’s likely that the form is tied to one of those services, but it’s hard to pinpoint without more context.

    Regards!

  • JRodwell's avatar
    JRodwell
    Copper Contributor

    OK that's helpful, thanks Luchete.

    I expect it was Teams in this instance & will do some testing to see if I can narrow it down further.

    • luchete's avatar
      luchete
      Steel Contributor

      Great JRodwell,

      If the help was useful, could you please mark this thread as solved/completed?

  • luchete's avatar
    luchete
    Steel Contributor

    Hi JRodwell,

    "ms-fluid_component" refers to a Microsoft component related to the fluid framework, which is used for building interactive, real-time collaborative applications. It might show up in the results when the form interacts with components that use this framework, like SharePoint or Teams. It’s likely that the form is tied to one of those services, but it’s hard to pinpoint without more context.

    Regards!

Resources